This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a383132303a3a2f34342d3434203d3e20323731343636.roa
File:                     323830343a376266383a383132303a3a2f34342d3434203d3e20323731343636.roa (raw, json)
Hash identifier:          ZOakpNCiLoIgjy8LdUo6104bWBejn3YMHf8eb+Mu+gU=
Subject key identifier:   95:CC:B3:C4:1C:B4:73:23:46:E8:50:2B:C8:13:74:3F:9D:39:A9:7D
Certificate issuer:       /CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
Certificate serial:       5FC04861D577B03BEE0EFEDD55635FB279CB6BAC
Authority key identifier: A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a383132303a3a2f34342d3434203d3e20323731343636.roa
Signing time:             Wed 14 Jan 2026 00:38:34 +0000
ROA not before:           Wed 14 Jan 2026 00:33:34 +0000
ROA not after:            Wed 13 Jan 2027 00:38:34 +0000
asID:                     271466
IP address blocks:        2804:7bf8:8120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl
                          rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 11:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c0:48:61:d5:77:b0:3b:ee:0e:fe:dd:55:63:5f:b2:79:cb:6b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9AD322E02D9AC8B620D17958647B5EB72C644A2
        Validity
            Not Before: Jan 14 00:33:34 2026 GMT
            Not After : Jan 13 00:38:34 2027 GMT
        Subject: CN=95CCB3C41CB4732346E8502BC813743F9D39A97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:74:0e:e8:ab:9d:43:94:e6:9e:c2:4e:ad:
                    f9:d3:d4:7c:53:6e:dc:1a:40:b7:75:a2:ae:dd:2d:
                    85:67:f4:5f:50:4b:c7:ca:e3:00:ed:c5:9d:75:72:
                    04:4f:cf:88:c9:73:33:37:46:76:93:e7:80:8d:12:
                    a5:f7:1a:eb:c8:ae:2d:39:e3:70:f9:bb:28:3c:ae:
                    d2:1d:b5:23:29:54:45:b4:4e:02:9d:cb:c5:ce:51:
                    c5:11:02:00:30:08:7f:58:f4:ab:49:ed:e5:2a:fe:
                    0a:86:a0:ac:98:e3:30:dd:31:37:85:bd:00:5d:9e:
                    57:4b:e0:40:c8:d1:e9:60:0e:0b:ff:38:0c:3c:92:
                    2a:99:a3:52:02:0c:e8:66:4a:72:22:85:dc:81:9b:
                    ce:cb:0c:b3:4b:91:26:50:3f:d2:08:e5:eb:f4:16:
                    c3:79:59:81:0e:a5:f3:79:1b:e2:23:d8:63:08:1a:
                    a6:ce:dc:e8:9d:ca:94:45:0f:a4:23:5f:28:79:92:
                    03:43:07:18:d3:43:da:3f:d1:93:c8:6b:de:31:f5:
                    ea:6f:f1:48:83:73:e6:39:07:2c:9f:d1:35:dd:d9:
                    70:0b:73:4f:2a:e9:61:e5:97:59:48:f4:6e:51:0e:
                    78:d1:f1:ae:de:b8:9d:54:19:a1:6c:e0:ee:2d:fa:
                    df:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CC:B3:C4:1C:B4:73:23:46:E8:50:2B:C8:13:74:3F:9D:39:A9:7D
            X509v3 Authority Key Identifier:
                keyid:A9:AD:32:2E:02:D9:AC:8B:62:0D:17:95:86:47:B5:EB:72:C6:44:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/A9AD322E02D9AC8B620D17958647B5EB72C644A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A9AD322E02D9AC8B620D17958647B5EB72C644A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GERsX9xkjC34TXyjRzCHLVkKgFixKoJCBZeTLEJqTej/0/323830343a376266383a383132303a3a2f34342d3434203d3e20323731343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7bf8:8120::/44

    Signature Algorithm: sha256WithRSAEncryption
         0a:ca:a6:bb:dd:bc:b0:51:70:4f:76:32:63:64:70:dc:c8:60:
         03:5c:67:95:14:99:e5:53:c9:7b:76:7a:4a:d5:d5:3a:c4:bb:
         e2:b7:d7:08:d9:83:d7:10:89:e7:28:45:47:59:57:ea:44:07:
         6f:29:69:7b:d1:4b:86:da:fb:75:f9:01:8d:56:fa:7a:15:ce:
         05:1e:ab:e5:5c:da:77:02:a4:06:ac:3e:80:18:08:68:d0:ff:
         a2:d4:93:50:23:02:98:8c:01:f1:76:42:73:d3:b8:bb:dd:85:
         c4:d1:e6:15:44:08:b8:9a:1b:81:fd:3e:22:c1:9e:74:f8:d1:
         6a:cc:c6:f6:68:b3:1e:f3:05:b6:48:13:b1:2f:47:19:34:c2:
         dc:16:d4:fa:84:6f:1d:6d:64:8a:cd:cc:23:6a:09:09:a2:e2:
         dc:75:03:7e:d2:05:dc:c2:43:8c:f6:91:c1:8e:32:13:79:05:
         99:b5:cb:4c:3d:02:fb:a8:64:34:09:0f:31:89:76:6d:62:8f:
         bd:80:3a:0a:9c:c5:28:60:5c:47:ab:ad:93:bf:5e:33:28:9c:
         6e:46:64:b3:3d:68:5b:f9:91:4a:e7:6a:62:f3:67:97:ca:a4:
         25:6f:58:c9:dc:d7:8f:ce:cd:31:24:19:86:e8:b0:96:ac:fa:
         59:85:12:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:30:51 2026 by rpki-client